Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
File:                     GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft (raw, json)
Hash identifier:          sgyUmKXCwJLWUovVk4Yf2pAy83Rz+M+ZZdKTX4459Uk=
Subject key identifier:   AF:93:9D:CD:A8:56:0F:8E:9A:61:9E:EF:A2:87:2B:E0:DF:17:64:39
Authority key identifier: 1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54
Certificate issuer:       /CN=1ab634dc74f6037ba47311d127420e76f296be54
Certificate serial:       0199FCC6267B415206B0A9FF298BDB212079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 14:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:08 +0000
Files and hashes:         1: 7UAk0cN_93o1IqUzEsLzy3OF8t8.roa (hash: X/DccKCPSXNbl5PAX4IP4Kv17+DSYA35yARpxNApl1o=)
                          2: GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl (hash: gs8/SytuxS0+D+rSbekk4HLSFaWTFoHm7+gwdJIx1pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:26:7b:41:52:06:b0:a9:ff:29:8b:db:21:20:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ab634dc74f6037ba47311d127420e76f296be54
        Validity
            Not Before: Oct 19 14:01:08 2025 GMT
            Not After : Oct 20 14:01:08 2025 GMT
        Subject: CN=af939dcda8560f8e9a619eefa2872be0df176439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:02:dc:f8:d2:6d:28:92:dd:70:3f:80:c9:
                    cd:9e:04:8b:f0:68:a7:d8:99:15:cf:ff:62:48:9c:
                    62:93:67:85:10:fa:9d:25:b9:83:73:76:6f:3c:19:
                    ea:55:e4:7f:2d:a8:c0:43:92:01:df:e3:47:10:2e:
                    80:68:2c:db:23:7b:5d:5e:30:62:a7:a2:53:6f:b3:
                    d0:b0:f8:8c:05:f8:f5:99:b3:3c:be:56:b5:bb:95:
                    e3:f4:03:5e:68:14:6e:7e:e0:a6:68:68:b0:f3:48:
                    79:26:b1:c4:16:33:6f:5d:4a:48:08:23:9e:47:24:
                    b6:26:5d:95:ed:ec:74:e6:ca:d0:1b:cd:69:24:16:
                    24:63:70:64:4d:77:46:17:c3:05:18:b6:6c:f6:ec:
                    5f:4e:97:1a:53:2c:68:15:45:1e:c1:90:93:cb:47:
                    26:ed:c2:5b:03:81:df:8d:df:2d:0f:c2:de:5d:4f:
                    90:7d:4b:5f:cc:43:33:aa:bf:0f:8e:6a:e3:80:f5:
                    6d:ea:ae:dc:8c:a9:fb:2c:3a:05:35:88:6e:a5:ac:
                    d0:f4:d2:69:a5:43:06:9e:44:4e:9f:bc:26:88:ea:
                    74:fd:b9:81:35:10:cc:d1:1e:17:a1:5e:16:96:96:
                    ef:90:4b:81:ab:09:6b:2c:48:f6:e0:28:c8:d4:a2:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:93:9D:CD:A8:56:0F:8E:9A:61:9E:EF:A2:87:2B:E0:DF:17:64:39
            X509v3 Authority Key Identifier:
                keyid:1A:B6:34:DC:74:F6:03:7B:A4:73:11:D1:27:42:0E:76:F2:96:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7a26e6-f7ae-4df0-9ecb-d879f7e709d6/1/GrY03HT2A3ukcxHRJ0IOdvKWvlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4a:ac:9e:de:10:df:f4:0b:0f:d3:fa:f1:af:1e:e5:5a:a1:
         5d:58:97:4b:3b:99:f6:d9:09:18:37:75:10:46:10:71:6b:0a:
         b1:48:74:07:9c:b4:2d:2d:ab:2c:cc:60:a2:0d:5f:da:77:6c:
         2c:7a:c1:e2:a5:7d:df:84:84:e8:c2:69:25:ee:2a:4e:f7:b4:
         98:36:a8:c9:f1:40:af:7d:bc:32:da:e2:f5:3b:c8:ae:19:04:
         29:dd:a1:48:17:a7:7b:a5:32:e4:23:24:f6:4f:22:42:2d:3c:
         ac:fe:36:b5:f6:a5:03:fd:b2:38:61:9e:37:fc:18:9a:1d:9e:
         90:2c:36:df:aa:2e:00:df:25:1f:c5:ac:ae:6f:a5:b9:2f:58:
         f5:8a:7e:58:11:c0:ba:c0:2b:78:5a:25:cc:95:98:1e:6d:06:
         e1:1c:2d:b1:16:02:91:2e:2e:70:81:a5:3b:4c:cf:06:76:0c:
         b4:46:5b:a8:b4:24:48:95:d9:1b:ac:57:03:27:b3:fc:83:72:
         f7:86:2d:3f:e3:fe:6c:b2:a3:bd:fa:92:f7:3b:c5:74:4a:72:
         99:19:b2:55:09:5b:a0:09:8a:7e:5c:88:b3:48:ec:20:ff:c8:
         1c:de:d4:a4:4b:a7:da:7f:23:9c:e5:4b:2e:b2:3e:4c:7a:33:
         bf:2d:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:29 2025 by rpki-client